by DAN CALLOWAY
Publlished 7 March 2010

UNITED STATES – The networking needs of XYZ Corporation have changed significantly over the last five years. As the IT manager, it is imperative that the approach I recommend to management for upgrading the network—not just for the sake of improving applications that run on it, but taking into account the aspects of improving the network from a hardware and software (protocol) perspective—be taken that will ensure a reliable, scalable, and efficient network that will not only meet the requirements—now but five years from now—of the business sector and its partners (stakeholders) in the organization who will likely need to remotely connect to the network, but which will be acceptable to everyone and that can be accomplished with the least effort and most economical means.

The approach that is often taken when upgrading a corporate network, like XYZ Corporation, is to rush into the upgrade by adding network devices of differing quality from various vendors as well as software applications in the same manner because the hardware and software is the latest and greatest on the market and does exactly what the business office wants to implement and use. This is the wrong approach because the business office and management lose sight of the fact that a lot of planning goes into upgrading a network from a hardware/software and services perspective. If the former approach is taken, then most likely at some point, the network will no longer be able to support the services needed for the business factions or the network traffic generated by the users. When the network fails, then, undoubtedly, management will look to point blame on IT for not ensuring the upgrade was successful in the first place and, in all likelihood, will seek outside assistance (an ISP or managed service) in giving advice and correcting the issue, which will be costly and will adversely affect IT’s credibility in the organization.

The approach that I would recommend to management after reviewing the corporate strategic goals and current and projected mission statements of the company would be to: (1) Confer with my department on the goals the company wanted to meet and where it was heading in the next five to ten years, and elicit from them their expert recommendations for the necessary hardware and software that would be required to achieve those goals; (2) Have an onsite technician perform a site survey of the network, documenting the physical layout of the current network from a hardware standpoint, and the applications that currently run on the network as a starting point for the upgrade project; (3) Ensure the site survey collected information on the current business plans and projected growth of the company, number of users and types of equipment needed, current Internet connectivity, what applications the network needs to support, what new services will be required now and in the future, what the security and privacy requirements are now and in the future, what the wireless network requirements (wireless or a mix of wired and wireless) are, what the reliability and uptime expectations of the new network are, and what are the budget constraints; (4) Request a formal written proposal from a prospective ISP on the requirements for and the costs associated with supporting the backbone for the network; (5) Develop a SWOT (strengths, weaknesses, opportunities, and threats) analysis of the upgrade plan; and (6) Report the findings of the site survey, written proposal of the ISP, results of the SWOT analysis, and documented proposal for the network upgrade to management for their approval. Following the approval from management, I would execute the network upgrade in five phases: (1) Requirements gathering, (2) Selection, design, and purchasing of equipment and applications, (3) Implementation of the upgrade, (4) Operation in a live environment, and (5) Review and evaluate the new network (hardware/software applications) against the original design plans to see if they are a match (“The Technology Upgrade Planning Guide,” 2010).

I would not foresee any major obstacles to implementing the network upgrade if all of the steps outlined above are executed properly and there is complete and upfront communications between the IT department and the business factions/management during all phases of requirements gathering, design selection, implementation, operation, and review.

——————————

References:

The Technology Upgrade Planning Guide. (2010). The Technology Upgrade Planning Guide. Retrieved March 8, 2010, from http://www.thebrookfieldgroup.com/news_story32.php.

Tagged with:
 

by Dan Calloway
Published August 20, 2oo9 at 1:10pm EST; www.dancalloway.com

McAfee Virus Scan

McAfee Virus Scan

The first step in securing your home PC or home network is to ensure that the Operating System and applications running on the PC(s) have all the latest security patches/bug fixes. This includes not only the Operating Systems but the applications running on them as well, such as MS Office™ Suite, Adobe™ Acrobat Reader, WinZip™, Macromedia Flash Player™. MS Windows™ Media Player™, etc. Microsoft™ offers the Automatic Updates feature that is built into is Windows™ 98/ME/2000/XP Operating Systems. Using this feature by turning it on to receive updates (often Security patches) is a must. Microsoft no longer supports the Windows™ 98/98SE operating system and if you’re still using these two OSs, you are on your own for ensuring they are up-todate and have the security patches to keep them from being vulnerable. Beyond the 98/98SE versions of MS Windows™, security patches are still coming out on an almost-daily basis.  Microsoft™, Windows™ XP Home Edition or Professional has a software firewall program built into the OS (with the implementation of SP2, or Service Pack 2) that is comparable with most 3rd-party software firewall programs such as Norton Internet Firewall or ZoneAlarm Pro. By default, the Windows™ Firewall is turned on. Turning this feature off is not recommended and unnecessary. Each time you need access to the Internet to run an application, the Firewall will ask if you want to allow it to access the Internet. Answering YES to this question places this application on the Firewall Exception List thus granting it access in the future without user intervention. Ports can be turned on and off and IP Addresses/URLs can be blocked as well. Other things you should or shouldn’t do to protect your PCs and the data they contain are:

(more…)

Most of the viruses, worms, and other cyber attacks you see on the Internet today affect primarily the MS Windows Operating Systems(OSs). Why is this the case? Well, simply put, hackers, crackers, cyber terrorists and others such as virus programmers attack MSWindows OSs mainly because they are the most prevalently used OSs worldwide. Security concerns on PCs running OSs other than MS Windows are therefore less likely to be targeted for attacks. However, this is not the only reason. Another reason for MS Windows being targeted more than other OSs such as UNIX, Linux, Apple OSX and Linspire can be explained by the fact that MS Windows OSs have more vulnerabilities and security holes written into them and because today’s cyber terrorists are more familiar with MS Windows because they have studied how they work in greater detail than some other OSs in use today.

Linux

Linux

For instance, Linux, a derivative of UNIX (an OS originally developed by Bell Laboratories), which was invented by Linus Torvalds, a Norwegian programmer, with the assistance of other UNIX programmers worldwide since 1991, has always been an OS that not many people, with the exception of UNIX and Linux geeks, could fully understand. Linux is starting to make its way onto the desktops of more and more PCs over the last decade and, as a result, is no longer less a security target than it was before when it was protected through obscurity and ignorance. Likewise, Apple Computers has released its latest version of the Operating System for the Mac known as OSX which is totally UNIX-based and no longer relies on the original Apple™ OS, such as existed in Apple OS9.x and earlier. Since both of these OSs as well as Linspire are built on the original UNIX code, they are by design less vulnerable to security attacks. (more…)

Tagged with:
 

by Dan Calloway, MSIT
Published August 8, 2009 at 7:15pm; www.dancalloway.com

There is much skepticism surrounding cryptography. Fagin et al. (2008) indicates that there is progress being made in this area to remove the skepticism. The National Institute of Standards and Technology (NIST) has joined forces with the National Security Agency (NSA) to form the “Common Criteria” process known as the Common Criteria for Information Technology Security Evaluation 2005 whose aim it is to increase the confidence in cryptographic and information-related security products. Additionally, the Department of Defense (DoD) has enacted policy directives requiring Information Assurance (IA) professionals to receive information security training in addition to basic IA training for all of its DoD employees (Fagin et al.). Fagin et al. further notes that security today requires some level of skepticism and critical thinking.

Bhargav-Spantzel et al. (2007) contends that there is a recent paradigm in identify management called user-centricity identity management. The study conducted by Bhargav-Spantzel et al. differentiated between two predominant notions: relationship-focused and credential-focused identity management. In the former approach, a user only maintains relationships with identity providers (IDPs) and thus every transaction providing identity information is conveyed to the appropriate IDP. In the latter approach, the user must obtain long-term credentials and store them in a local provider database.

Bhargav-Spantzel et al. indicates that the most predominant identity management model on the Internet today is the silo model where users handle their own data and provide it to organizations separately. One solution to this dilemma offered by Bhargav-Spantzel et al. is the centralized federation model, such as Microsoft’s Passport, which removes the inconsistencies and redundancies of the silo model and provides the Web users a seamless experience. Bhargav-Spantzel et al. offers a taxonomy for unifying the relationship-focused and credential-focused identity management, and investigated the idea of a universal user-centric system, which incorporates the current approaches. The open research question offered by Bhargav-Spantzel et al. in their study is the search for a credential-based user-centric system that crosses the boundaries of user-centricity. The study also supports their approach in unifying the notions in user-centricity that could be useful in the field of user-centric federated identity management systems (FIMS). (more…)

Tagged with:
 

by Dan Calloway
Published August 9, 2009 at 4:50pm; www.dancalloway.com

PC/Network Security Risks

PC/Network Security Risks

Security risks on your PC occur whether you’re connected to the Internet or not. However, you’re at a greater risk of data being compromised when you’re connected to the Internet via your PC. Your data is at risk if you have a hard drive failure or if there is a power failure and you haven’t saved your work. When you’re connected to the Internet, however, your risk rises because if you disconnected your PC, no one would be able to access your data unless they were sitting in front of your PC. Therefore, disconnecting your PC or turning it off when not in use will solve many security risks that you might be faced with. If you’re like me, however, I don’t follow this practice as I like to keep my PC on at all times simply because being a techie I know that turning your PC on and off all the time is harder on the hard drive and the electronics on the motherboard due to the heating up and cooling down of the electronic components and solder on the printed circuit cards. In addition, keeping your PC on all the time maintains a constant humidity environment within the PC box itself thus allowing the PC to operate at optimum levels. The main reason for getting a Broadband service is so you don’t have to connect to the service each time you want to use it and thus turning off the PC or disconnecting your service runs counter to this logic. It’s really up to you as a user which you prefer. It must be said though that turning off the PC or disconnecting your connection through a router will stop any incoming traffic 100% of the time. I choose to discuss here ways in which to achieve almost the same level of security without having to turn off the PC or disconnect your Broadband service. (more…)

Get Adobe Flash playerPlugin by wpburn.com wordpress themes

SEO Powered by Platinum SEO from Techblissonline